Clear rules, verifiable practice

Privacy policy

Who we are. Block Aero Technologies Limited, Unit 01, 14/F, OTB Building, 259-265 Des Voeux Road Central, Sheung Wan, Hong Kong ("Block Aero", "we") is the data controller for personal data processed through this website and in our business operations. Development and operations are performed in part by our wholly-owned subsidiary Block Aero Technologies (Thailand) Ltd, Bangkok. We comply with applicable data protection laws where we operate, including Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and Thailand's Personal Data Protection Act (PDPA).

What we collect

• Business contact data. Name, work email, organization, role, and phone number when you book a demo, register investor interest, contact support, or attend our events.
• Account data. Credentials and organization details when your organization activates a Block Aero account via our account management application.
• Usage data. Log and device information needed to operate, secure, and improve this website and our services.

Why we process it

• To perform contracts with customer organizations and operate the Block Aero platform and Aviation Blockchain Network.
• To respond to inquiries, demos, support requests, and investor-relations registrations (legitimate interest and/or consent).
• To meet legal, regulatory, and information-security obligations, including aviation customer contractual requirements.

Sharing and transfers

We do not sell personal data. We share it only with service providers under data processing agreements (assessed under our supplier security program), with authorities where the law requires, and within transactions you ask us to perform. Where data crosses borders, we apply PDPA-compliant safeguards.

Retention and your rights

We keep personal data only as long as needed for the purposes above or as law requires. Under the PDPA you may request access, correction, deletion, portability, restriction, or objection, and you may withdraw consent at any time. Contact support@block.aero; we respond to verified requests within 30 days. You may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

A note on blockchain records. Asset records on the Aviation Blockchain Network describe aircraft, engines, and parts, not people. Where business documents contain personal data (for example, a signatory name on a certificate), originals are stored off-chain under access control; the chain stores cryptographic hashes.

Information security policy (public summary)

Block Aero operates an information security management system certified to ISO/IEC 27001:2022 by the Aviation Suppliers Association Certification Body (Certificate BLOC-001-06-26-27), covering the design, development, and maintenance of the Block Aero platform for data digitization.

• Governance. An executive-owned ISMS with management reviews, an internal audit program, and an annually refreshed Statement of Applicability.
• Access control. Role-based, least-privilege access for customers and staff; joiner, mover, and leaver reviews.
• Data protection. Encryption in transit and at rest; segregation between sandbox, production, and private channels.
• Blockchain integrity. A permissioned Hyperledger Fabric network with endorsement policies controlling who may write which records.
• Resilience. Continuity and disaster-recovery exercises and independent penetration testing on an annual cadence.
• Suppliers. Tiered vendor security assessments and data processing agreements for providers that touch customer data.
• Incidents. A documented incident response process with root-cause analysis and corrective action tracking.

Report a vulnerability or security concern: support@block.aero. See live compliance status in the Trust Center.

ISMS policy library

The summaries on this page are backed by the full policy suite of our certified ISMS. Each policy below is version-controlled, executive-approved, accepted by all personnel, and monitored continuously in Vanta. Current approved versions are available to customers, auditors, and prospects through our Trust Center (request access where documents are gated).

• Security operations. Information Security Policy (AUP), Access Control Policy, Cryptography Policy, Operations Security Policy, Physical Security Policy, Secure Development Policy.
• Data and assets. Data Management Policy, Asset Management Policy.
• People and suppliers. Human Resource Security Policy, Code of Conduct, Information Security Roles and Responsibilities, Third-Party Management Policy.
• Resilience and response. Incident Response Plan, Business Continuity and Disaster Recovery Plan, Risk Management Policy.
• ISMS governance. The ISMS-00 through ISMS-12 document set: scope, ISMS policy, roles and authorities, risk assessment and treatment, documented-information control, communication plan, internal audits, management review, corrective action and continual improvement, security objectives, Statement of Applicability, and legal, regulatory, and contractual requirements.

Acceptable use policy

Users of Block Aero websites, applications, and APIs agree not to:

• Misrepresent identity or organization.
• Upload unlawful, infringing, or fraudulent content, including falsified airworthiness documentation.
• Probe, scan, or test the vulnerability of our systems without written authorization.
• Misuse API credentials or exceed authorized scopes.
• Interfere with service availability.

Violations may result in suspension under the applicable customer agreement and, where appropriate, reporting to authorities. Fraudulent aviation documentation is reported to the relevant aviation authority.

General Terms Agreement (GTA)

Platform services are provided under the Block Aero General Terms Agreement together with your Order Form. The GTA covers the service license, fees and payment, customer data, confidentiality, warranties, liability, term and termination, and Service Levels I to IV. Where documents conflict, precedence runs: Order Form, then General Terms Agreement, then the Policies on this page, then the Website Terms of Use.

Usage-based fees are metered in Aero Compute Credits (ACC), the unified metering unit for blockchain and AI services, at the rates published on the ACC Rate Schedule, as updated from time to time. Subscription plans and monthly ACC allowances are on the pricing page. Questions or a countersigned copy: support@block.aero.

Download the General Terms Agreement (PDF)

Website terms of use

This website is operated by Block Aero Technologies Limited (Hong Kong), which wholly owns Block Aero Technologies (Thailand) Ltd. By using it you accept these terms. Platform services are contracted with Block Aero Technologies Limited under the General Terms Agreement.

• Content. Site content, branding, and design are owned by Block Aero or its licensors. You may not reproduce them commercially without permission.
• Information only. Website content is provided for general information and does not constitute an offer, contractual commitment, or investment, legal, or airworthiness advice. Platform services are governed by the applicable customer agreements.
• No warranty. The site is provided "as is" without warranties of any kind; to the maximum extent permitted by law, Block Aero is not liable for damages arising from use of the site.
• Third-party links. Links to third-party sites (marketplaces, support, status, careers) are provided for convenience; we are not responsible for their content.
• Governing law. These terms are governed by the laws of Hong Kong.

Cookies

This website keeps cookies to a minimum.

• Advertising. We do not set advertising or cross-site tracking cookies on this website.
• Analytics. We use Plausible Analytics, a privacy-focused, cookieless analytics service that does not use cookies and does not collect personal data for advertising. It records aggregated page-view metrics only.
• Platform sessions. Signing in to the Block Aero Terminal may set strictly necessary cookies used for authentication and session security. These are required for the service to function.
• Third-party embeds. If you follow links to third-party services (for example LinkedIn, X, YouTube, or our platform login), those services may set their own cookies under their policies. We do not control those cookies.

If our use of cookies changes, we will update this section and, where the law requires, ask for your consent. Questions: support@block.aero.